WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
wp-event-solution
Published
2026-07-13
Title
Eventin < 4.1.16 - Unauthenticated Payment Bypass via Order Status Manipulation
Slug
wp-eventpress
Published
2024-11-08
Title
EventPress <= 1.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
wp-events
Published
2017-11-03
Title
Events <= 2.3.4 - Authenticated SQL Injection
Slug
wp-events-manager
Published
2024-08-30
Title
WP Events Manager < 2.2.0 - Authenticated (Subscriber+) Time-Based SQL Injection
Slug
wp-events-manager
Published
2025-09-22
Title
WP Events Manager < 2.2.2 - Missing Authorization
Slug
wp-ever-accounting
Published
2025-04-16
Title
Ever Accounting < 2.1.6 - Cross-Site Request Forgery
Slug
wp-expand-tabs-free
Published
2023-01-06
Title
WP Tabs < 2.1.17 - Contributor+ Stored XSS
Slug
wp-expand-tabs-free
Published
2023-01-06
Title
WP Tabs < 2.1.15 - Multiple CSRF
Slug
wp-expand-tabs-free
Published
2023-12-28
Title
WP Tabs < 2.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
wp-expand-tabs-free
Published
2025-03-03
Title
WP Tabs < 2.2.7 - Admin+ Stored XSS
Slug
wp-expand-tabs-free
Published
2025-05-16
Title
WP Tabs < 2.2.13 - Admin+ PHP Object Injection
Slug
wp-experiments-free
Published
2022-03-07
Title
Title Experiments Free < 9.0.1 - Unauthenticated SQLi
Slug
wp-experiments-free
Published
2025-01-07
Title
Title Experiments Free <= 9.0.4 - Cross-Site Request Forgery
Slug
wp-experiments-free
Published
2025-01-07
Title
Title Experiments Free <= 9.0.4 - Missing Authorization
Slug
wp-expert-agent-xml-feed
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
wp-explorer-gallery
Published
2014-08-01
Title
wp-explorer-gallery - Arbitrary File Upload
Slug
wp-export-categories-taxonomies
Published
2025-12-31
Title
Export Categories & Taxonomies <= 1.0.3 - Missing Authorization
Slug
wp-express-checkout
Published
2023-03-17
Title
WP Express Checkout < 2.2.9 - Admin+ Stored XSS
Slug
wp-express-checkout
Published
2024-03-29
Title
WP Express Checkout (Accept PayPal Payments) < 2.3.8 - Unauthenticated Price Manipulation
Slug
wp-extended
Published
2014-08-01
Title
SWFUpload - Cross-Site Scripting (XSS)
Slug
wp-extended-search
Published
2023-01-06
Title
WP Extended Search < 2.1.2 - Contributor+ Stored XSS via Shortcode
Slug
wp-external-links
Published
2016-03-31
Title
WP External Links <= 1.80 - Multiple Cross-Site Scripting (XSS)
Slug
wp-extra
Published
2023-10-24
Title
WP EXtra < 6.3 - Subscriber+ .htaccess File Modification
Slug
wp-extra
Published
2023-11-16
Title
WP EXtra < 6.5 - Cross-Site Request Forgery ToolImport
Slug
wp-extra
Published
2023-10-25
Title
WP EXtra < 6.3 - Missing Authorization to Arbitrary Email Sending